Static task
static1
Behavioral task
behavioral1
Sample
b94a70536cac34f74fa2634b236f674a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b94a70536cac34f74fa2634b236f674a.exe
Resource
win10v2004-20240226-en
General
-
Target
b94a70536cac34f74fa2634b236f674a
-
Size
2.6MB
-
MD5
b94a70536cac34f74fa2634b236f674a
-
SHA1
c68dc79d6907f0ff4fe4ca7e8a07a8ae3bd58389
-
SHA256
6e626974866c901364357903319225560f9d1afd2e3df0eaeac266137f38f3b4
-
SHA512
edbe2c601de8c3b65b6d3fc342b55f5f3c86251111aa2aa5a03bbbf95cab4512c5f2ada370c7ecfbf0059502b335a9f074e3b4a560b86c711562fbfaec1e9879
-
SSDEEP
49152:eu5B0g7mM+M6RkMkIM7I067nDxsNBk9/fw2BwfmM0fO8xmN3Aek03noj45wlDT:dYM+M6RkMkIM7ssNi9Xwgwfo2eUJF3nK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b94a70536cac34f74fa2634b236f674a
Files
-
b94a70536cac34f74fa2634b236f674a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ